Skip to content

Agent Trust Plane v0.3.2

Choose a tag to compare

View all tags
@TimelessVisions TimelessVisions released this 22 Sep 15:57
· 133 commits to main since this release
v0.3.2
5953f01

Agent Trust Plane v0.3.2

Distribution-readiness patch release. No product features: the
authorization kernel, policies, CLI commands and wire formats are unchanged
from v0.3.1.

What changed

  • PyPI-ready README rendering: all documentation links and the hero image
    are absolute GitHub URLs.
  • Improved package metadata: descriptive summary, keywords, classifiers,
    project URLs.
  • agent-trust-plane console entry point (same CLI as atp) so
    uvx agent-trust-plane … can work once the package is on PyPI.
  • PyPI Trusted Publishing workflow (.github/workflows/publish.yml, GitHub
    OIDC, no stored token) with tag/version/artifact gates, plus the
    scripts/check_dist.py distribution gate that CI runs on every push.
  • Build backend pinned so wheels built from this tag are byte-identical
    across machines.
  • Linux dependency-license verification and a dependency vulnerability
    audit with no known advisories in the tested resolution
    (docs/release/licensing.md, docs/release/verification.md).

Try locally

From the attached artifacts (or a wheel you build from this tag with
uv build):

uvx --from agent_trust_plane-0.3.2-py3-none-any.whl agent-trust-plane --help
uvx --from agent_trust_plane-0.3.2-py3-none-any.whl atp demo mcp

Once the package is published to PyPI (not yet done at the time of this
release):

uvx agent-trust-plane demo mcp

Status

  • Experimental. Not production software. No users yet.
  • Not independently security audited.
  • macOS is not verified (not in the CI matrix).
  • No IDE MCP client (Claude Desktop, Cursor, VS Code, Claude Code) has
    been tested.
  • Only the mediated path is protected: an agent that can reach a tool
    without the proxy is not stopped (docs/security/enforcing-the-boundary.md).
  • Agent credentials are bearer tokens with expiry and revocation, no proof
    of possession; the operator key and .atp/keys.env are omnipotent.
  • Single-use grants prove one release, not exactly-once external effects.

Full lists: docs/security/threat-model.md, docs/security/security-review.md.
Changelog: CHANGELOG.md (0.3.2).

Assets 2
Loading